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ON A CONJECTURE OF GROSS AND ZAGIER 


DONGHO B YEON, TAEKYUNG KIM, AND DONGGEON YHEE 


Abstract. Let E be an elliptic curve defined over Q of conductor N, let M be the Manin constant of E, and C be 
the product of local Tamagawa numbers of E at prime divisors of N. Let K be an imaginary quadratic field in which 
each prime divisor of N splits, Pk be the Heegner point in E(K), and U1(E/K) be the Tate-Shafarevich group of E over 
K. Also, let 2 Ufc be the number of roots of unity contained in K. In ua. Gross and Zagier conjectured that if Pk has 
infinite order in E(K), then the integer u^-C-M • (#UI(E/K)) 1 ' 2 is divisible by #£(Q)tors* In this paper, we show that 
this conjecture is true. 
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1. Introduction 


The goal of this paper is to prove a conjecture made by Gross and Zagier in ini concerning certain divisibility 
among arithmetic invariants of elliptic curves. This gives a theoretical evidence to the “strong form” of Birch and 
Swinnerton-Dyer conjecture, predicting that the leading coefficient of the Hasse-Weil /..-function of an elliptic 
curve encodes some precise arithmetic invariants of the curve. 

In GU, Gross and Zagier gave a formula for the first derivative at s = 1 of /.-series of certain modular forms. 
In particular, they transferred the formula to the realm of L-functions of elliptic curves. So let E be an ellip¬ 
tic curve defined over Q with conductor N. For a negative square-free integer d, we consider the quadratic 
twist Ed of E which is in general not isomorphic to E over Q but becomes isomorphic over the imaginary qua¬ 
dratic field K = Q(Vd). We denote the discriminant of K over Q by disc(W) which is equal to d when d = 1 
(mod 4) and to 4 d otherwise. We also assume a close relation between E and K in such a way that each prime 
number dividing N splits completely in K. This is called the Heegner condition or Heegner hypothesis in the 
literature, which we assume throughout this paper. The corresponding L-functions are also strongly related: 
we have L(E/K,s) = L(E/Q.s) ■ /.(Lj//Q.,v). By computing root numbers, the Heegner condition forces that 
L(E/K. 1) = 0. Throughout this paper, we use the following notations. 

• /V is the conductor of E. 

• © is the Neron differential of E over Q and | ft) 11 2 := J e /q\ ft) A ft) is the complex period. 

• h is the Neron-Tate height attached to E. 

• M is the Manin constant of E, i.e., if / is the newform attached to E and n : Xq(N) —> E is a modular 
parametrisation, then M is the ratio satisfying K*co = M ■ 2nif(x)dx. We have M £ Q x and a famous 
conjecture of Y. Manin is that M = 1 for all strong Weil curves E. For general discussions on the constant 
and current status about the conjecture, see (T). 

• Pk £ E (K) is the Heegner point over K. This depends on the elliptic curve and its modular parametrisation 
chosen. 

• 2uk is the number of roots of unity contained in the field K. uk = 1 for all imaginary quadratic fields K 
except when K = Q(y/— T) and K = Q(y/—3), in these cases we have u E = 2 and u E = 3 respectively. 

• C is the Tamagawa number of E over Q which is defined by the product C = W p \nC p of all local Tama- 
gawa numbers. 

Now the main theorem of Gross and Zagier ( ifTTI . Theorem 1.6.3) has the following consequence. 


Theorem 1.1 ( IfTTI . Theorem V.2.1). 


L'(E/K, 1) 


INI 2 -Kp k ) 

M 2 ■ u \-1 disc (K) I 1 / 2 


( 1 ) 


Now the Birch and Swinnerton-Dyer conjecture comes into the picture. We assume here and thereafter that the 
Heegner point P E has infinite order, so that L'(E/K. 1) / 0. For more details for the following conjecture, we refer 
EZ1, appendix C.16. 


Conjecture 1.2 (Birch and Swinnerton-Dyer). If ord s= i L(E/K. s) = 1 , then the Tate-Shafarevich group HI (E/K) 
of E over K is finite, and L'[E/K,s) = BSD^y^, where 


||to|| 2 -C 2 -/i(/^)-#HI(£/ls:) 

DoUp'/K — --- 

’ \disc(K)\ l / 2 -[E(K):ZP K } 2 


( 2 ) 


Remark. In the literature, the factor C 2 in the right hand side of the equation (0 is replaced by the Tamagawa 
number of E over the extension K. However, by the Heegner hypothesis, any prime p dividing N splits in K like 
p = pp, and thus the number is equal to the square C 2 of the Tamagawa number of E over Q. 


Remark. The Tate-Shafarevich group IH(£’ /K) is in fact finite in this case (cf. Theorem 5 in fl5ll ). 
Equating the above two formulae (|T} and 0, Gross and Zagier obtained the following conjecture. 


Conjecture 1.3 ( lITTl . Conjecture V.2.2, Strong Gross-Zagier Conjecture). If Pk has infinite order in E(K), then 
ZPk has finite index in Ls (ZC) and we have 

[E{K) :ZP K \ =u K -C-M-(#m(E/K)) 1/2 . (3) 


2 





As the order of the rational torsion subgroup E (Q)t ors clearly divides the index \E (K) : ZPk], they also obtained 
a weaker version of the conjecture, which we call “the Gross-Zagier conjecture” throughout this paper. 

Conjecture 1.4 ( IfTTII . Conjecture V.2.3, Weak Gross-Zagier Conjecture). If E(K) has analytic rank 1, then the 
integer uk-C-M ■ (#ni(£' /K)) x ^ 2 is divisible by #E{ Q) t0 rs- 

Rational torsion subgroups of elliptic curves E over Q are completely classified by Mazur 1211 : /2(Q) t0 i-s is 
isomorphic to one of the following groups: 

J Z/uZ for 1 < n < 10, n = 12, 

|z/2Z©Z/«Z for n = 2,4,6,8. 

In eg, Lorenzini obtained the following theorem. 

Theorem 1.5 Proposition 1.1). Let E be an elliptic curve defined over Q with a Q -rational point of order 
k. Then the following statements hold with at most five explicit exceptions for a given k. The exceptions are given 
by their labels in Cremona’s table 0. 

(a) Ifk = 4, then 2 | C, except for ‘15a7’, ‘15a8\ and ‘17a4’. 

(b) Ifk = 5,6, or 12, then k \ C, except for ‘lla3’, ‘14a4’, '14a6\ and ‘20a2’. 

(c) 7/’k = 7,8, or 9, then k 2 \ C, exceptfor ‘15a4’, ‘21a3’, ‘26bl’, '42al\ ‘48a6\ ‘54b3\ and ‘102bl’. 

(d) Ifk = 10, then 50 | C. 

Without exception, k \ C ifk = 7,8,9,10 or 12. 

For the exceptions of above proposition, we can check that #E( Q) tor s divides C ■ M, except for ‘15a7’, which 
is considered in §[5] So the only remaining cases for the validity of the conjecture are those when /; (Q)tors is 
isomorphic to the following 6 groups: Z/2Z, Z/3Z, Z/4Z, Z/2Z©Z/2Z, Z/2Z0Z/4Z, and Z/2Z0Z/6Z. 
Our goal here is to prove these remaining cases, thus to complete the proof of the conjecture. 

Main Theorem. Let E be an elliptic curve defined over Q such that the rational torsion subgroup E( Q)tors is 
isomorphic to one of the 6 groups: ZfTL, Z/3Z, Z/4Z, Z/2Z0Z/2Z, Z/2Z©Z/4Z, and Z/2Z0Z/6Z. Let K 
be an imaginary quadratic field such that E(K) is of (analytic) rank 1 and that K satisfies the Heegner condition. 
Then the coniecture \1.4\ is true, i.e., #E (Q)tors divides C ■ M ■ u^- (#III(£ /K)) 1 ^ 2 . 

From now on, E always denotes an elliptic curve defined over Q having torsion subgroup isomorphic to one 
of the above 6 groups, and K is always an imaginary quadratic field such that ord S =\L(E/K,s) = 1 and that K 
satisfies the Heegner hypothesis. 

Let us briefly explain how to prove the Main Theorem. The present article is divided into two parts. The first 
part ® is dealing with the case that E (Q)tors has order a power of 2. When E (Q)tors contains full 2-torsion 
subgroup £ [2], i.e., when E (Q) toIS ~ Z/2Z©Z/2Z, or Z/2Z0Z/4Z, the situations are a lot easier than the other 
cases, and we can prove the Main Theorem by computing Tamagawa numbers using Tate’s algorithm f 33 and 
For the other cases, i.e., when E( Q) t0 rs — Z/2Z or Z/4Z , there are curves having Tamagawa numbers not 
divisible by #E(Q) taIS , so we need to compute the size of the 2-torsion part of the Tate-Shafarevich groups over 
K using Kramer’s formula. There are some ‘exceptional families’ for which C ■ (#HI(£’/K)) 1 ^ does not have 
enough power of 2. For these cases, we avoid difficulties by considering isogeny invariance of the Gross-Zagier 
conjecture. Kramer’s formula and the isogeny invariance are located at the heart of techniques in the proof, so in 
the preliminary section §0we give sufficient background to these techniques. 

The second part (£7]~ |9]i is devoted to the case in which E( Q)tors has a rational torsion point of order 3. 
When .EXQjtors — Z/2Z 0 Z/6Z, we can prove the Main Theorem by computing only Tamagawa numbers ( £jji. 
But when E (Q)t 0 r S — Z/3Z, there are also curves having Tamagawa numbers not divisible by #E(Q) toIS , so we 
need to compute the lower bound of the size of the 3-torsion part of Tate-Shafarevich groups over K using Cassels’ 
formula or need to compute the Manin constants using the phenomenon that optimal curves differ by a 3-isogeny 
(§0- Same as Part 1, preliminaries are summarised in £7] 

All expicit computations in this paper were done using Sage Mathematics Software Go). When we do com¬ 
putations with Weierstrass equations, we frequently change the variables of an equation to obtain another. In 
particular, when we use the clause “make a change of variables via [u,r,s,t]’\ it should be understood to take the 
change of variables formula given by 

x = u 2 x + r and y = u 2 y + u 2 sx! + 1. 
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For the details, we refer (271 . §111.1. 


Part 1 . E (Q)tors has order a power of 2 

2. Preliminaries for Part 1 

2.1. Kramer’s formula. In this subsection we introduce a formula of Kramer ED, and discuss how to measure 
the size of the Tate-Shafarevich group of elliptic curve using it. Of course the purpose of this section is to provide 
a tool to show the Main Theorem for the cases E (Q) Uirs ~ Z/2Z or Z/4Z. Thus, throughout this subsection, we 
assume LXQJtors — Z/2Z or Z/4Z, and consequently £(Q) [2] ~ Z/2Z. 

Since the Tate-Shafarevich group III(£ /K) is finite (Theorem 5 in 031 ). its 2-primary part III(£ /K) [2°°] has 
perfect square order. So if we find a non-trivial element in ni (£'/ K)\2], (or equivalently dimp 2 111 (£ /K)\2] > 1), 
we can immediately see that 2 | (#UI(Zs / K )) l; L So in this subsection, we are concentrating on how to find such 
a non-trivial element. 

Let p be a prime number. We use the following notations. 

• i p = dimp 2 CokeriV = dimp^ E (Q p ) /NE(K p ), where N : E(K p ) —> E (Q p ) is the norm map. This quantity 
is called local norm index of E at p. 

• Let 

O = U £ Sel 2 (£/Q): \ € N p (]^[Sel 2 (Zs/^p) 
l \P\p 

This group is called the everywhere-local norm group. 

• NS' is the image of the norm map Sel 2 (E/K) —> Sel 2 (£/Q), which we do not need in this paper. 

Theorem 2.1 (ED, Theorem 1). The dimension of ni(£’/ K)\2\ (over F 2 J is equal to 

^ i( + dimp 2 <F + dimp 2 NS' — rank£ (K) — 2 dimp 2 E (Q) [2], 

where the sum is taken over all primes (including infinity) of Q. 

Back to our case. Because rank£ , (W) = 1 and L’( Q)[2] ~Z/2Z, by Theorem l2.ll dimp 2 [11(L/ A' )[2] > 1 if and 
only if the quantity 

if + dimp 2 <t> + dinip, NS 1 

is greater than or equal to 4. 



2.1.1. Local norm indices. For general introduction and useful facts about the numbers i p , we refer §4 of CD 
and §2 of US). We only concern those numbers relevant to our situation. The proof of the following proposition 
can be found in §2 of ED- 


Proposition 2.2. Let E be an elliptic cur\’e over Q with £(Q)[2] ~ Z/2Z and let K = Q (\/d) be an imaginary 
quadratic field satisfying the Heegner hypothesis. The local norm indices if for various primes l are given as 
follows. 


(a) 

(b) 


One has i a = = i (C | R) 


0 if A min < 0, 

v 1 if ^ min ^ 0- 

Let p be an odd prime. If p is a good prime for E and is ramified in K, then one has i p = dimp, E [2] (k), 
where k is the residue field of Q p . Otherwise one has i p = 0. 


(c) 


If 2 is a good prime for E and is ramified in K, then one has (2 


2 if (^min,^)Q 2 — TL 
1 [f (^min,^)Q 2 = 1, 


— )q, denotes the Hilbert norm-residue symbol. Otherwise, one has ij = 0. 


where 


2.1.2. Everywhere-local norm group. Now we provide a way to compute the everywhere-local norm group <1>. 
The following is the key. 

Proposition 2.3 (ED, Proposition 7). The everywhere-local norm group <t> is the intersection o/Sel 2 (£/Q) and 
Sc\ 2 (E ( i /Q) inside H l (Q,E[2]) ~ H l (Q,[2] ), where Ej is the quadratic twist ofE by d. 
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Let E d be the quadratic twist of E by d. In particular, suppose E is defined by the Weierstrass equation 

y 2 = x 3 +Ax 2 + Bx 1 

which has discriminant A = 2 4 B 2 (A 2 — AB). Then E d has the Weierstrass equation of the form 

y 2 = x 3 +Adx 2 + Bd 2 x. (5) 

The discriminant of the above equation (0 is given by A c / = 16 d 6 B 2 (A 2 — AB). 

Proposition 2.4. The 2-torsion subgroups E [2] and E d [2] are canonically isomorphic as Gal(Q |Q) -modules. 
Consequently, the Galois cohomology groups //*(Q,£[2]) and H* (Q,E d [2]) are isomorphic. In particular, we 
identify H l (Q,£[2]) = H l (Q,[2]) in the sequel. 

Proof. The Galois-equivariant isomorphism £[2] — > E d [ 2] is given by (f,0) H > (dt,0). □ 

Denote by P (resp. P d ) the rational torsion point of order 2 in £ (resp. E d ) corresponding to (0,0) in the 
equation © (resp. (0,0) in the equation (0). Let £' (resp. E' d ) be the elliptic curve £/( P) (resp. E d / (Pd)) and let 
0 (resp. (j>d ) be the canonical quotient 2-isogeny £—>■£' (resp. E d —> E' d ). 

Proposition 2.5. There are canonical homomorphisms 

// 1 (Q,£[0])^// 1 (Q,£[2]), and H l (Q,E d [<j) d }) ^ H l (Q,E d [2}), 

and they induce 

Sel^(£/Q) —> Sel 2 (£/Q), and Sel^(£ t //Q) —> Sel 2 (£ f //Q). 

Proof. If we denote the unique dual rational 2-isogeny of 0 by 0', then we have a canonical exact sequence 

0 —> £[ 0 ]—>-£[ 2 ]—»£'[ 0 ']— > 0 . ( 6 ) 

This defines a canonical map // 1 (Q,£[0]) —> // 1 (Q,£[2]) on cohomology groups, and it restricts to the map 
Sel^(£/Q) —> Sel 2 (£/Q) of subgroups. For E d and (j) d the proof is mutatis mutandis the same. □ 

Proposition 2.6. There are canoncial isomorphisms II 1 (Q.£[0] j ~ Q x /Q x2 and H l (Q,E d [(j) d ]) ~ Q x /Q x2 . 
Moreover, the isomorphisms are compatible in the sense that the following diagram is commutative: 

H l (Q,E{^}) -> H 1 (Q ? £ [2]) 



Q x /Q x2 ~//>(Q:M2) 



H l {Q,E d \*d]) - >H\Q,E d [2}) 

where the vertical map in the middle is induced by the canonical isomorphism in the Proposition ^. 4\ 

Proof. Clearly the isomorphisms p .2 £[0] and Uo —> E d [(j) d ] are compatible in the sense the left triangle com¬ 
mutes. By Kummer theory we know H 1 (Q. /L) = Q x /Q x2 , whence the result follows. □ 

Proposition 2.7. Let G be the subgroup of Q x /Q x2 generated by the class of A 2 — AB. Then G is the kernel of 
the homomorphisms H l (Q,£[0]) —> H l (Q,£[2]) and H l (Q,E d [(j) d ]) —» //’ (Q, £^[2]). Thus, 

Ker(Sel^(£/Q) —»• Sel 2 (£/Q)) = GnSel^(£/Q) C Sel^(£/Q). 

Similarly, 

Ker(Sel fe (£ rf /Q) ->■ Sel 2 (£ rf /Q)) = GnSel^(£ rf /Q) C Sel *(E d /Q). 

Proof. We only give a proof for £ and 0. For E d and tj> d , everything is the same under making certain notational 
change. From the short exact sequence ([6]), we have the long exact sequence of cohomology groups: 

0 ->■ £(Q)[0] ->• £(Q)[2] -»■ £'(Q)[0'] 4 H\ Q,£[0]) -»■ H l (Q,E[2])^ H\ Q,£'[0']) -> •• • 

Because we only consider those elliptic curves with £ (Q) [0] = £(Q) [2], the map £(Q)[2] —> £ , (Q)[0 / ] is the zero 
map, and this again forces us that r/ : £'(Q)[0'] — > H l (Q, £ [0]) is injective. The image T] (£'(Q)[0']) is the kernel 
of Z/ 1 (Q,£[0]) ^ Z/ 1 (Q,£[2]). 
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We claim that this kernel is equal to G. Write £(Q)[2] = {O.P.Q.P + Q}, where 0 is the identity of E and 
P G E{ Q), and similarly write ^(Q)^'] = {O' ,T}, where O' is the identity of E' . Clearly T G E'{ Q). Since 
£(Q)[2] —> ^'(Q) [ 0 '] is surjective but E (Q) [2] — > £'(Q) [tf>'] is the zero map, the point Q is mapped onto T under 
£(Q)[2] —> £ , '(Q)[0']. Then, rj(T) G H l (Q,E[(j)]) is defined by the 1-cocyle 


G^<y{Q)-Q 


P if o{Q)=P + QfQ, 
0 if a(Q)=Q. 


However, this 1-cocycle corresponds to the 1-cocycle cr o[\fh)/ \fh defining an element // 1 (Q./I 2 ), where 


b = A 2 — 4B, since in the Weierstrass equation (Qi, Q corresponds to the point 


-A±\/A 2 -4B 


0 and thus 


<J(Q) = Q if and only if a (^\/A 2 —4B^j = V A 2 -4B. Clearly the 1-cocycle cr 
element H [ (Q.jj. 2 ) corresponds to A 2 — 4B in Q x /Q x2 . 


r(v / A 2 ^4 B) 
sJA - 4 B 


defining an 

□ 


Recall (Proposition 12.3b that the everywhere-local norm group <f> is the intersection of two Selmer groups 
Sel 2 (£’/Q) and Sel 2 (£^/Q) inside H 1 (Q,E[2\) = H (Q. E f j\2\). In order to identify elements in the intersection, 
we need to find b G Q x /Q x2 such that b G SA(E/Q) flSel^(£/Q) by descent arguments (cf. J27], chapterX). 
In order to ensure this is not the identity element in <t>, we should check b qLG. This will be done when we deal 
with E (Q)tors — Z/4Z or Z/2Z. 


2.2. Isogeny invariance of the Gross-Zagier conjecture. Let E and E’ be isogenous elliptic curves defined over 
Q, and K be an imaginary quadratic field satisfying the Heegner hypothesis. We consider those curves with fixed 
modular parametrisations n : Xq(N) —> E and K 1 : Xo(iV) —> E’. 

Proposition 2.8. Let 6 : E —> E’ be a rational isogeny. 

(a) If the strong Gross-Zagier conjecture ( Coniecture ll . Jl ) is true for E then it is also true for E 1 . 

(b) Suppose that 6 respects modular parametrisations ofE and E\ i.e., Tl' = Q on. Then we have 

M 2 -C 2 - #HI(£/ K) _ M' 2 ■ C' 2 ■ #HI (E'/K) 

[E{K ): Z/V 2 \E\K) : ZP^] 2 

(c) Let p be a prime. If 

(i) ord p #E(K) toIS = otd p #E(Q) toIS , and 

(ii) ordp#£’(Q) t ors < ord p [u K -C-M- (#HI(£yx)) 1/2 ), 
then 

ord p #£'(Q) tors < ordp (ii K C' -M'- (#U1{E'/K)) * /2 ) . 

In particular, if E(K) lo rs = £(Q)tois» an d if the weak Gross-Zagier conjecture ( Coniecture \1.4[ for E is 
true, then it is also true for E'. 

Proof, (a) Isogenous curves E and E' have the same /.-functions and the same BSD formulae, i.e., L(E/K.s) = 
L(E'/K,s) and BSD^/^- = BSD £ //^ (cf. Conjecture 11.21 ). The latter is a theorem of Cassels J5j. As the strong 
Gross-Zagier conjecture is obtained by simply equating these formulae, it is clearly isogeny invariant. 

(b) Let P' K be the Heegner point for E' defined by P' K = 9(Pk)- Since L'(E/K.s) = L'(E'/K,s), we have 

\\co\\ 2 -h(P K ) M 2 
\\<o'\\ 2 -h{P' K ) M’ 2 ' 

Similarly, from BSD^/^ = BSD £ // K , we get 

\\(0\\ 2 -h(P K ) #m{E'/K)-C' 2 ■ [E(K) : Z P K } 2 

Hot'll 2 -h{P' K ) #U1(E/K)-C 2 -[E'(K) : Z P' K ] 2 ' 

Equating, we obtain the equation [7] 

(c) Let P (resp. I 1 ') be a generator of the group E(K)/E(K) tors (resp. E'{K)/E'{K ) tors ), and let If = vP 
(resp. P' K = v'P'). As P' K = 0(If ) = v9(P), the index v' is divisible by v. The assumption (i) ordp#L(/C) t ors = 

6 














ordp#£’(Q)tors implies that ord p [E(K) toIS : ^(Qjtors] = 0. By the equation|7] we have 

u 2 K -M 2 -C 2 -#Ul (E/K) _ u 2 k -M , 2 -C' 2 -#W.(E'/K) 

(#£(Q)tors) 2 • [E{K) tors : £(Q) to rs] 2 2 . (#£'(Q) tors ) 2 . [E'(K) toIS : £'(Q)tors] 2 

and by the assumption (ii) the left hand side of the above equation is a p-adic integer. Thus, 

ord p (uk-C'-M' ■ (#III(£7tf)) 1/2 ) > ordp • (#£'(Q) tors ) ■ [£'(K) tors : £'(Q)tor S ]) 

> ord / ,#£ , '(Q)tors- 


□ 


Remark. By (9| Corollary 4 or Il25l . Theorem 2, for a given elliptic curve E defined over Q, there are at most 4 
quadratic fields K such that E(K) lors ^ £’(Q)tors- 


3. E( Q) tors ~Z/2Z®Z/4Z 

In this section, we prove the Main Theorem for the cases when E(Q) lo[s is isomorphic to Z/2Z CD Z/4Z. 


Theorem 3.1. Suppose that E( Q)tor S is isomorphic to l/TL®!/ 4Z. Then the order 8 = #E(Q) toIS divides the 
Tamagawa number C ofE, except for the curve ‘15a3’, in which case C M = 8. 


From El, table 3, such elliptic curves can be parametrised by one parameter X £ Q by 

y 2 +xy — Ay = x 3 — A.r 2 , 


( 8 ) 


a 


where A = ( — ) — — = 


1 


16a 2 - j3- 


, with positive integers a,/3 having no common prime divisor, and a/fi f 


16 16/3 2 

1 /4. The discriminant of the equation i s A = A 4 (1 + 16A) / 0. Note that since we take a and /j relatively prime, 
there are no common prime divisor of 16a 2 — /3 2 and 16 /j 2 except 2. 


Proposition 3.2. Let p be a prime. 

(a) If m := ord ;7 A > 0, then the reduction of E modulo p is (split) multiplicative of type Lt m . Consequently 
the Tamagawa number at p ofE is C p = 4m. 

(b) Suppose that p 2. If m := ord /; A < 0, then m is always even, and the minimal Weierstrass equation at 
p is given by 

y 2 + p z xy — u p z y = x 3 — ux 2 , (9) 

where u £ Z* satisfying X = up m in Z p , and where z is a positive integer. The reduction type of the 
equation modulo p is I„ with n = 2z, whence C p = 2z. 

Proof, (a) This can be shown by directly applying Tate’s algorithm (see (26), §IV.9) to the Weierstrass equation 

©. 

(b) Since gcd (16a 2 —/3 2 ,16/3 2 ) is a power of 2, if m = ord p A = ord p ((16a 2 — /3 2 )/16/3 2 ) < 0 then the 
exponent m is always even. Changing Weierstrass equation (cf. im, proof of Proposition 2.4), we get the 
equation ©. We use Tate’s algorithm again for this equation to obtain the minimality and reduction type. □ 


Let 

S = \p primes : ordp A > 0} , T = {p primes : p 2, ordp A < 0} . 

Proposition 13.21 says that Theorem 13. II is true when (i) #S > 2; or (ii) #5=1 and #T > 1. Thus the following 
proposition shows Theorem 13. II 

Proposition 3.3. With possible finite number of exceptions, we have #5 > 1 and moreover ifT = 0, then #5 > 
2. The exceptions are exactly the following curves: ‘15al’, ‘15a3’, ‘21al’, ‘24al’, ‘48a3\ ‘120a2’, ‘240a3\ 
‘240d5 ’, and ‘336e4 ’. But in any case including these exceptions, we have 8 | C ■ M. 
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Proof. Write fi = 2" jf with n > 0 and [}' odd. The condition T = 0 is equivalent to the condition p 1 - 1. We 
divide the proof according to the value of n. 

Suppose n = 0. In this case 16a 2 — /3 2 is odd and so gcd (16a 2 — /3 2 ,16/3 2 ) = 1. Suppose that there is no 
prime dividing 16a 2 — )3 2 . We then have 16a 2 — /3 2 = ± 1. This is possible only if a = 0, a contradiction. For 
the second statement, assume J3 = 1. In this case, we get A = (16a 2 — 1)/16. If there is only one odd prime p 
dividing 16a 2 — 1, then we must have 4a — 1 = 1 , a contradiction (a £ Z>o). 

16a 2 — 4/3 ' 2 4a 2 —j3 ' 2 


Suppose n = 1. We have A = 


16-4/3' 


16/F 


-, and gcd (4a 2 — /3' 2 ,16/3' 2 ) = 1. If there were no odd 


prime dividing 4a 2 — /3' 2 , we would have 4a 2 — ft 11 = ± 1, whence a = 0, a contradiction. If /3 =2 (equivalently 
[f = 1 ), and if there were only one prime dividing 4a 2 — /3' 2 , then either one of the relations 2 a 1 = 1 or 
2a + 1 = —1 would hold. Thus we must have a = 1. In this case we get the curve ‘48a3’, having C 2 = C 3 = 4. 

Suppose n > 5. In this case we can take another Weierstrass equation (cf. Equation @) of E of the following 
form: 


yi 2 n X y — 2 n uy = x 3 — mx 2 , 


( 10 ) 


where u = a 2 — 2 2 ”~ 4 . This equation has discriminant A = (2 2 ” + 16m)2 2 "m 4 and C 4 = 2 2n+4 u + 16 u 2 + 2 4 ", 
so ord 2 (A) = 2n +4 and ord 2 (c 4 ) = 4. Moreover, by l27l . Proposition VII.5.5, since its /-invariant has order 
8 — 2n < 0, E has potentially multiplicative reduction modulo 2. If this equation (ITOl) is minimal at the prime 2, 
then the curve has additive reduction modulo 2 (ord 2 (c 4 ) > 0). Tate’s algorithm says that E has reduction of type 
I| for some k, with Tamagawa number 2 or 4. Suppose that the equation (ITOt is not minimal modulo 2. Then 
we can transform (ITOt into a minimal model modulo 2 , which has discriminant of order 2 n +4 — 12 = 2 n — 8 at 
2 and C 4 of order 0. Since the order of the minimal discriminant is even and > 0, and since E has multiplicative 
reduction lord 2 C 4 = 0), we have even C 2 by Tate’s algorithm. As C 2 is even and 4 | C p for some odd p £ S, the 
proof of this case is completed. 

Remaining cases (n = 2,3, and 4) can be shown similarly. □ 


4. E (Q) tors ~ Z/2Z © Z/2Z 

In this section, we prove the Main Theorem for the cases when E (Q)tors is isomorphic to Z/2Z © Z/2Z. 

Theorem 4.1. Suppose that E( Q)tors is isomorphic to Z/2Z® Z/2Z. Then the order 4 = #E(Q) toIS divides the 
Tamagawa number C ofE, except for two curves ‘17a2 ’ and ‘32a2 ’. For these two cases we have 4 = C ■ M. 

Following ED, we can take a Weierstrass model of the form 

y 2 = x(x + a)(x + b), ( 11 ) 

where a,b £ Z with a f h f 0 f a. Note that a and b is in general not relatively prime. The discriminant of the 
equation (fill is A = 16 (a — b) 2 a 2 b 2 and C 4 = 16a 2 — 16 ab+ 16 b 2 . Let c = a — b=f 0. If there is a prime p dividing 
both a and b, then by changing the equation via [/;.(), 0 , 0 ] if necessary, we assume min (ord p a.ord ; , b) = 1 . 

We first investigate the Tamagawa number C p for primes p dividing abc. 

Proposition 4.2. Let p be a prime. Assume that either (i) p \ a and p j be; or (ii) p \ b and p \ ac. Then we have 
the following. 

(a) If p is odd, then E has reduction of type I 0 rd p A = l 2 ord,,(a) modulo p, with even Tamagawa number at p. 

(b) Suppose that p = 2. Ifm := ord 2 a = 4 and ifb = 1 (mod 4), then E has good reduction modulo 2, whence 
C 2 = 1. Otherwise, Co is even. 


Proof. We only give the proof for the case (i). By the symmetry of the roles of a and b in the equation, the case 
(ii) follows immediately. 

(a) This is immediate from Tate’s algorithm. 

(b) Suppose that 2 | a and 2 j be. We do a case-by-case study. In order to help readers to re-construct proofs 
of the results in the following table, we remark that we mostly apply Tate’s algorithm to the Weierstrass equation 


CD, while for the case m = 4 and b= 1 (mod 4) and for m > 5, we apply the algorithm to another Weierstrass 


equation y + xy = x J + ■ 


b — 1 o ab 


4 





m 

b mod 4 

Reduction Type of E at p = 2 

c 2 

1 

1 or 3 

III 

2 

2 

1 

I* 

2 or 4 

3 

T* 

L 0 

2 

3 

1 

nr 

2 

3 

I* 

2 or 4 

4 

1 

I 0 (good) 

1 

3 

I* 

2 or 4 

>5 

1 or 3 

l2m-8 

even 


Proposition 4.3. Let p be a prime such that p \ c and p \ ab. 

(a) If p is odd, then E has reduction of type Iord^A = l 2 ord p (c) modulo p, with even Tamagawa number at p. 

(b) Suppose that p = 2. If m := ordoc = 4 and if a = b = 3 (mod 4), then E has good reduction modulo 2, 
whence C 2 = 1. Otherwise, C 2 is even. 

Proof. We make a change of variables via [1, —a, 0,0], to get another equation 

y 2 = x 3 + (— 2 a + b)x 2 + a(a — b)x. ( 12 ) 

(a) Immediate from Tate’s algorithm applied to equation (fl2l >. 

(b) Let p = 2. Similar as above proposition, the results from Tate’s algorithm applied to the equation THT i are 
summarised as follows. In particular, when dealing with the cases a = b = 3 (mod 4) and in > 4, we use the 

9 9 — 2 c — b— 1 9 ac . 

equation y +xy =x -x H-x instead. 


m 

a and b mod 4 

Reduction Type of £ at p = 2 

C 2 

1 

any 

III 

2 

>2 

a = 1 (mod 4) or b = 1 (mod 4) (or both) 

\* k for some k 

2 or 4 

2 or 3 

a = b = 3 (mod 4) 

IIP 

2 

4 

I 0 (good) 

1 

5 

Pm—8 

even 


Proposition 4.4. Let p be a prime dividing two of a, b, or c. Then clearly it divides the third. By changing variables 
in the equation CD via \p, 0,0,0] if necessary, we assume min(ord /: ,a,ord ;7 b) = 1. Then E has reduction of type 
Ijf for some k, with even Tamagawa number. 

Proof. If m f n, then we may assume m> n = 1 without any loss of generality. By Tate’s algorithm, in this case 
E has reduction of type \ k with Tamagawa number 2 or 4. If m = n = 1, then we can write a = pa' and b = pb' 
with ( a!,p ) = {b',p) = 1. Hence, 

• if a' ^ b' (mod />), then E has reduction of type Iq modulo p with Tamagawa number 4; 

• if a! = h' (mod /?), then E has reduction of type I k modulo p with Tamagawa number 2 or 4. 

□ 

Recall that £ is an elliptic curve defined by the equation y 2 = x(x + a)(x + h) with discriminant A = 16 crb 2 c 2 f 
0 where a,b,c := a — b € Z. We also have assumed that min (ord ; ,a,ord /7 f>) < 1 for all primes p. Let 

S := {p primes : ord ; ,a > 0, ord /7 I? > 0} . 

If #5 > 2, then by Proposition 14.41 then the Tamagawa number C of E is divisible by 4. Thus the following 
proposition shows Theorem l4.ll 

Proposition 4.5. Suppose that #S < 1. Then 4 | C with only two exceptions: ‘17a2’ and ‘32a2’. But in both 
exceptions, we have C = M = 2. 

Proof. Proofs are similar to Proposition 13. 3 1 □ 
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5. E (Q)tors ^ Z/4Z 

Theorem 5.1. If E is an elliptic cur\’e defined over Q, having rational torsion subgroup E(Q ) tors isomorphic to 
Z/4Z, then the order 4 = #E( Q) to rs divides uk-C-M■ (#III(£' /K )) 1//2 . 

5.1. Tamagawa numbers. In order to prove Theorem 15. 1 1 we first consider Tamagawa numbers of E. 

From El. table 3, such elliptic curves can be parametrized by one parameter A by 

y 2 +xy — Ay = x 3 — Ax 2 , 

where the discriminant of the equation A 4 (l + 16A) / 0. This is the same as in section [3] but without further 
restriction on A. Let A = oc//3, with a,/3 £ Z and gcd(a,/3) = 1. By Pronosition l3.2l fa). we may assume a = 1. 
So we begin with the following Weierstrass equation 

y 2 +/3xy-/3 2 y = x 3 -/3x 2 , (13) 

with /3 £ Z. Note that this curve has discriminant A = (16 + /3)/3 7 and c 4 = (16 + 16/3 + /3 2 )/3 2 . If /3 = ±1, then 
we have either ‘15a8’ or T7a4\ both of which have M = 4. So we may assume that there is at least one prime 
dividing /3. 

Let p be a prime dividing /3, and let m := ord p /J > 0. Write /3 = p'"u, for some u £ Z with gcd(«,/?) = 1. 
Using Tate’s algorithm applied to Weierstrass equations y 2 + p z+l xy — p z+ 2 u~ l y = x 3 — pu~ l x 2 (when m = 2z + 1 
is odd) ory 2 + p z+1 xy — p z+2 u ' y =x 3 — pu 'x 2 (when m = 2 z is even), we can figure out the reduction types and 
Tamagawa numbers at primes p \ ft for E. 


m 

P 

additional conditions 

Reduction Type of E at p 


m = 2z + 1 for z £ Z>o 

any 



4 

m = 2 z for z £ Z>o 

p¥= 2 


h z 

even 

p -2 

u = 3 (mod 4) and m = 8 

I 0 (good) 

1 

otherwise 

bad 

even 


So, in the sequel, we assume 

• ordp/3 is even for all prime p\ 

• the number of odd primes dividing /3 is < 1. 

Moreover, if I is an odd prime dividing /3 + 16, then E has reduction of type / 0 rdf()3+i6) at ^0 We furthermore 
assume throughout this section, that 

• if £ is an odd prime dividing /3 + 16, then ord^ (/3 + 16) is odd. 

Suppose that there is no odd prime p dividing /3, i.e., /3 = ±2"' for some positive integer m. As we can see in the 
above table, in order to avoid 4 | C, we may assume m = 2 z is even. Applying Tate’s algorithm to the Weierstrass 
equation (IT3l> . we have the following results. 


ii 

Curve 

Tamagawa Number 

Manin Constant 

2 r 

‘40a3’ 

(N 

II 

<3 

$ 

2 

2 4 

‘32a4’ 

<N 

II 

G 4 

2 

2 lz with z > 3 


II 

G 1 


—2 2 

‘24a4’ 

C 2 -C 3 =2-l 

2 

—2 4 

singular curve 



-2 6 

‘24a3’ 

C 2 • C 3 = 2 • 1 

1 

-2« 

T5a7’ 

II 

G 1 

G 1 

2 

—2 2: with z > 5 even 


C 2 = 2(z-4) 


—2 2; with z > 5 odd 


C 2 = 2(z-4) 



So when |/31 is a power of 2, then we only need to deal with the cases /3 = — 2 2z with (i) z = 4 or (ii) z> 3 being 
odd. 


*This can be also shown by Tate’s algorithm, applied to the equation y 2 + pxy- (p + I6) 2 y = x 3 - (/3 + 96/x 2 + 192(/3 + 16)x- 128(j3 + 
24) (j3 + 16) for E. 
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5.2. (#U1(E/K)) l/2 . In this subsection, we shall see 2 | (#U1(E/K)) 1 ^ 2 , for various remaining cases left from 
considerations about Tamagawa numbers. Our main job is to show Jj^ + dim<f> > 4 (notations from subsection 
ED . Then, 


^i£ + dim<I> > 4 

- > 

dimr 2 HI^ /K)\2\ > 1 

- > 

2 | (#IH (E/K )) 1/2 


The first implication follows from Kramer’s theorem (see sub section ED- and the last implication is due to Koly- 
vagin’s theorem 03- 

From the above subsection, we only need to deal with the cases when /3 has at most one odd prime divisor. 
First, we consider the case where /3 is actually a power of an odd prime. 

Proposition 5.2. Suppose that p = p m for some m > 0. By the previous subsection, we assume 

• m = 2zfor some positive integer z; and 

• for all odd prime t dividing ft + 16, ord^ A mm = ordf (j3 + 16) is odd. 

Then we have dimp, III(£ /K)\2\ > 1, i.e., Theorem \5.1\ is true, except for a family of curves defined by the equation 

y 2 + p'xy — p z y = x 3 — x 2 , 

with p 2z + 16 = £ k being prime powers. 

Remark. For the exceptional family, Theorem l5.1l is also true. This will be shown in the following subsec tion !5. 31 

Proof. We begin with the following equation: y 2 + p 2z xy — p 4z y = x 3 — p 2 z x 2 . By a change of variables via 
[(1 /2)p z , 0,0,0], we gety 2 +2p z xy — 8/ry = x 3 — 4x 2 . Making another change of variables via [1,4, —p z , 0], we get 
y 2 =x 3 + {p 2z + 8)x 2 + 16x. The last equation has discriminant A = 2 l 2 (p 2z + 16 )p 2z and C 4 = 16p 4z + 256p 2z + 
256. Note that the minimal discriminant of E is given by A mm = (p 2z +16) p 2z ; in particular, E has good reduction 
modulo 2. 

Let <f> be the isogeny E —yE' := E/E( Q)[2]. (Note that £(Q)[2] ~ Z/2Z.) Following ffTOl . we compute 
the Selmer group Sel^(£/Q). For each prime t (including °°), we denote by 8 ( the map EfQip/tj) (E(Qi)) —> 
H 1 (Qf, E[(j)]). Since Sel ^(E/Q) C H l (Q,E[<j>]) ~ Q x /Q x2 , the elements of Sel^(£/Q) are those classes of b £ 
Q x such that their restrictions b £ //' (Q/,£,’[()]) ~ /Q x2 are contained in the image 1m <S, . So by considering 
the images Im 5/ , we can figure out which classes are in the Selmer group. For more details of this paragraph, see 
subsection l2.ll 

These local images are given as follows. 

• ImcL = {1}. 

• Im5g = Z^Q x 2 /Q x2 for odd primes i\ A. 

• Im 8 f — Q( /Q( 2 for odd prime ( \ A, and £ f p. 

# I mg= fQp/Qp 2 if P = 1 (mod 4), 
m P \z x Q x 2 /Q x2 if p = 3 (mod 4). 

. Im52 = {l,5}cQ 2 x /Q x2 . 

Here are some remarks on the odd primes dividing A. Since p 2z + 16 is a sum of two squares, so by the famous 

theorem on the sum of two squares, if £ = 3 (mod 4) divides ( p 2z + 16), then ord^ [p 2z + 16) must be even. 

However, we assumed that the exponent ordf (p 2z + 16) is always odd. Hence any prime divisor £ of [ p 2z + 16) 
must satisfy £ = 1 (mod 4). 

Let d be a negative, squarefree integer. We now compute the sum of local norm indices if. Note that L„ = 1. 
After excluding obvious cases giving > 4, we have the following four cases: 

• d = —2; 

• d = —q for an odd prime q\ 

• d = —2q for an odd prime q\ 

• d = —qcf for odd primes q, q'. 

Suppose first that d = —2. As (A m ; n ,J)Q^ = ( (p 2 ~ + I6)p 2 z ,—2j = (1,—2)q 2 = 1, we have Y.U = 3- Now 

we compute the Selmer group Sel ^(Ej/Q), where is the quadratic twist of E by d, and : £)/ -+ E', is 
the corresponding 2-cyclic isogeny. We denote by Sf the corresponding homomorphism E'JQf)/ fa (Lj/fQ;)) —> 
II 1 (Q e,Ed\<l>d\)- Local images Im 8 f are given as follows. 

• Im5^ = R x /R x2 . 
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• \rs\8f = Z;Qf/Qf for any odd prime £ j A. 

• Im5/ = /Q^ 2 for any odd prime £ | A, with £ ^ p. 


. ImS rf = J Q p/ Q f ifp = ±l (mod 8), 

P \z;Qf/Qf ifp = ±5 (mod8). 

• IrnSf = {1,-2}. 

/ —2 

By Heegner hypothesis, for any prime £ | A m i„, we have I —j— 



1. This implies that such an 


£ is congruent to either 1 or —5 modulo 8. However, by the sum of two squares theorem mentioned above, we 
must have £ = 1 (mod 8) if £ | A m j n and if £ ^ p. If p = 1 (mod 8), then the image of p is contained in <I> and is 
non-trivial, by Proposition [TT] and the assumptions we made in the statement of current proposition. So suppose 
that p = —5 (mod 8). If there are two distinct odd primes £ and £' dividing p 2z +16, then the image of £ or 
equivalently of £' is contained in <t> and is non-trivial. So for these cases, we have Y,h + dimp, <t> > 4. If there is 
only one odd prime dividing p 2z + 16, this will be covered in the following subsec tion !5. 31 

Suppose that d = —q for some odd prime q. Suppose first that q = 1 (mod 4), i.e. d = 3 (mod 4). As 
disc(Q(v / ^/)|Q) =4 d = —4 q, the prime 2 is ramified in K = Q (Vd). Since (A m j n ,^)g 2 = (1, — < 3 , )q 2 = 1 as 
—q = —1 or —5 (mod 8), we have ij = 2. Since U » = 1 and i q > 1, we always have Y.H > 4. 

Now assume that d = —q with a prime q = 3 (mod 4), then d = 1 (mod 4). In this case the prime 2 is 
unramified in K. So we have h = 0. Let us consider the Selmer group Sel®''(Zq//Q). 

• Im5^=R x /R x2 . 

• Im5/ = Z^Q^ 2 /Q^ 2 for any odd prime £{ A, £ ^ q. 

• Im 8f = Q x /Q x2 for any odd prime £ | A, and £ / p. 

. Im 8 d ={ Q '" /Q p 2 ifp ~ l (m ° d 4) ’ 

p {Z p Qf/Qf if/? = 3 (mod 4). 


• Im 8 'l 


{1 ,qi>}C Q x /Q x2 if q f ( P 2z + 8) and 


16 


= L 


a?/Q 

ImSj = {1,5}. 


x2 


otherwise. 


for some u £ Z x . 


Note that for any odd prime £ | A, we have 1 = 


-1 


(-1) 


q -1 l-\ 


. If p = 1 (mod 4), 


then the image of p is contained in <t> and is non-trivial. Even if p = 3 (mod 4), if there are at least two odd prime 
divisors of A m j n apart from p, then we also have dimp, <t> > 1, i.e., £ if + dimp 2 O > 4. If there is only one odd 
prime dividing p 2z + 16, this will be covered in the following ‘exceptional case’ I5J1 

Assume d = —2 q. We have i„ = 1 always. Note that (A m i„,c/)Q o = ( p 2z ( p 2z + 16), —2 q)^ = (1, — 2<z)q 2 = 1, 
whence ij = 2. Since i q > 1, we always have > 4. 

Finally, assume d = —qq 1 . If the prime 2 is ramified in K = Q (Vd), then surely we have > 4. Hence, 
we must assume the other, i.e., 2 is unramified, which means that d = 1 (mod 4). Without loss of generality, we 

then assume q = 1 (mod 4) and q’ = 3 (mod 4). Moreover, we further assume i q = i q i = 1, i.e., 

^ = — 1. Now consider the local images of Selas follows. 










Im5^ = R x /R x2 . 

Im5^ = Z^Q^/Q^ 2 for any odd prime £{ A, £ ^ q. 
Im 8 f = Q x /Q x2 for any odd prime £ | A and £ ^ p. 

if p = 1 (mod 4), 
if p = 3 (mod 4). 


Im5p 




Ir 8 q = 


I Qp/Q p 

[Z p Qf/Qf 

\Q q /Q q 2 


Im8£ = Q x /Q q 2 . 
ImSj = {1,5}. 


CQ X /Q,, 


x2 


if q\{p lz - 

ifq\(p 2z - 


8 ), 

8 ), 


for some u 


£ Z 


X 

q ’ 
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Note that for any odd primes i dividing A, we get 

j\ / i \ , 7 _| /£ 


1 = 


and thus we have either 


-qq 

e 

£ 

q 


-ItK-*)' 


= 1 or 


(-1) 



■{;)(? 

= — 1. Suppose first that /? = 1 (mod 4). If 


= 1, then we are done, since the image of p in <f> is non-trivial. If 


= — 1, then the image of either p 


or pq in <t> is non-trivial. Now, suppose that p = 3 (mod 4). If there are at least two distinct prime divisors of 

9 / £\ (P 2z + 16 ' 

p z + 16, then among those divisors, at least one i must have —I = 1, since 


q 


= — 1. For these cases 


we have £ if + dimp, ( h > 4. If there is only one odd prime dividing p 2z +16, this will be covered in the following 
‘exceptional case ’ 1531 

So far, we have shown that for any cases of d, we obtain i( + dimp, <F > 4 with a family of exceptions. Thus 
by Kramer’s formula, we have 4 | C■ (#in(£'/ K ))^ 2 for the curves not in the exceptional family. □ 


Proposition 5.3. Suppose that fi = (—l) s 2 m p'" for some s £ {0,1} and m,m' > 0. By the considerations of the 
above subsection and by the above proposition, the remaining cases are further divided by the following three 
cases. 

• s = 1, in — 2z for some z = 3,4 or odd z > 5 andm' = 0, 

• s = 1, m = 0 and m! = 2zfor some z. £ Z>o, or 

• s = 1, m = 8 and m' = 2 zfor some odd z £ Z>o 

Furthermore by the above subsection, we assume for all odd prime l, ord^ (/3 + 16) is either zero or odd. For each 
such case, we have dimp 0 IH(£’/A')[2] > 1, i.e., Theorem \5.1\ is true. 


Proof. Proofs are similar to Proposition 5.2. 


□ 


5.3. Exceptional case. This family is parametrised by the following Weierstrass equation: 

E : y 1 + p~xy — p~y = v 3 — .r 2 , 

where p is an odd prime congruent to 3 modulo 4. We consider the cases when p 2 ~ + 16 is an odd power of a 
prime, in other words, p 2: + 16 = q k for some odd prime q and odd integer k. When k > 1, such Diophantine 
equation has only integer solution p z = 3, q = 5, and k = 2, c.f. 0, Lemma 5.5. But this case corresponds to the 
curve ‘15a3’, having torsion subgroup Z/2Z©Z/4Z. So we can exclude it from our consideration, and we may 
assume k = 1, i.e., p 2z + 16 is a prime. 

Here the discriminant A = p 2: (p 2z + 16) = p 2z q, which is the minimal discriminant. The conductor of the 
curve E is pq, and £(Q) tors = Z/4Z. 

Let G be the unique subgroup of E (Q)tors of order 2, and let E' be the curve E/G. We can find a Weierstrass 
equation for E' thanks to Velu’s formulae (cf. ED). The Weierstrass equation for E' is given as follows: 

y 2 + p z xy - p z y = x 3 - x 2 - 5x - {p 2z + 3), 

with discriminant A' = p 4z (p 2z + 16) 2 . Factoring 2-torsion polynomial, we see that E' contains the full 2-torsion 
subgroup in E'{ Q): their x-coordinates are: 3, —1, and — (p 2z + l) /4. In particular, the weak Gross-Zagier 
conjecture is true for E' (cf. 0 and ©. Now the next corollary follows from the isogeny invariance of the 
Gross-Zagier conjecture. 

Corollary 5.4 (to Pronosition l2.8b . The weak Gross-Zagier conjecture is true for the elliptic curve E in the family 
and the quadratic field K satisfying Fleegner hypothesis. 

Proof. Take 6 : E' —> E be the isogeny dual to E —> E/G and take modular parametrisations respecting 9, i.e., 
we first choose a modular parametrisation k' of E' and let n = 0 o it! be the modular parametrisation for E. By 
Proposition 12.81 (cl. and by the remark just below the proposition, for a fixed E in the family, the weak Gross- 
Zagier conjecture is true except possibly for at most 4 quadratic fields. Since we only concern 2-divisibility, let 
us try to figure out the quadratic fields satisfying 2 = ordiF^Qjtors < ordi E' If this inequality is satisfied, 
then E'(K) toIS must contain a point of exact order 4. 
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The 4-torsion polynomial for E' (i.e., the polynomial whose roots are the ^-coordinates of the points in 
£'[4](Q)) is given as follows: 


f\{x)fi{x)fo{x)g{x) 


where 

• /i (x) = 2x 2 + ( p 2z + 4)x + ( -p 2z + 2), 

• fi(x) = x 2 -6x-(p 2: + 7), 

• /3 (x) = x 2 + 2x + (p 2z + 1), 

• g(x) = (4x + p 2z + 4) (x + 1) (x- 3). 

Evidently, the roots of g(x) correspond to points in E'\2}. Discriminants d, of f, (x) are as follows: 

• di = p 2z (p 2z + i6) = p 2 z q, 

• d 2 = 4 (/? 2z + 16) = 4 q, 

• dj = —4p lz . 

Thus if K = Q (y/d) is a quadratic field, the polynomials f (x) do not have roots in K unless K = Q(\/— 1) or 
K = Q(i Jq). Note that Q( ^Jq) is a real quadratic field, which is not in our concern. If K = Q(v / — 1), then we 
have uk = 2. As we already knew 2 | Ce ■ (#in(£’ /K)) 1 ^ 2 , we have 4 | uk-Ce ■ (#UI(£"/ K ))*^ 2 , and the weak 
Gross-Zagier conjecture is also true for this case. □ 


6. E{ Q) tors ~Z/2Z 

Theorem 6.1. If E is an elliptic curve defined over Q, having rational torsion subgroup E( Q)tors isomorphic to 
Z / 2Z, then the order 2 = #E (Q)tors divides uk-C-M ■ (#111 (E/K )) ^ 2 . 

For such elliptic curves, we can find a Weierstrass model following Kubert B2): 

y 2 =x 3 +Ax 2 +Bx, (14) 

where A. B £ Z. Note that A and B are not necessarily relatively prime. This elliptic curve has discriminant 
A = 16 B 2 (A 2 — 4B) and C 4 = 16(A 2 — 3 B). Let N be the conductor of E, and A m i n be the minimal discriminant of 

E. 

6.1. Tamagawa numbers. The purpose of this subsection is to compute Tamagawa numbers of E at various 
primes, in order to reduce the cases. Remaining cases will be dealt with in the subsequent subsections. More 
precisely, we show the following. 

Proposition 6.2. Let E be an elliptic cur\’e defined by the equation (114b . 

(a) If gcd(A,B) ^ 1, i.e., if there is a common prime dividing both A and B, then 2 \ C. 

(b) IfB fL {1,-1,16, —16}, then 2 \ C. 

(c) If p is an odd prime such that ord p (A 2 —4 B) is even, then 2 \ C p . 

Proof, (a) Let p be a prime dividing both A and B. First of all, if both ord ; ,,4 > 2 and ord p B > 4 are true, then we 
can make a change of variables via [p, 0,0,0] to get another equation of the same form as equation (fl-ib with (A. B ) 
replaced by ( A/p 2 ,B/p 4 ). Consequently, we assume either ord p A < 2 or ord p B < 4. Using Tate’s algorithm, we 
find reduction types for E modulo p as summarised in the following. 


ovApB 

ord /( A 

Reduction Types of E modulo p 

Tamagawa Number C p 

1 


III 

2 

2 


for some k 

even 

3 

1 

Tj; for some k 

even 

>2 

III* 

2 

>4 

1 (bindingly) 

V k for some k 

even 


(b) Let p be a prime such that p \ B but p\A. Using Tate’s algorithm, we have the following results. 
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ord ; , B 

A mod 4 

Reduction Types of E modulo p 

Tamagawa Number C p 

pf =2 



I„ with n = ord /7 A = 2 ord /7 B 

even 

p = 2 

1 


III 

2 

2 


I/, for some k 

even 

> 3 

-1 

Iyt for some k 

even 

3 

1 

IIP 

even 

4 

I 0 (good) 

1 

>5 

I„ with n = ord ;7 A = 2 ord /7 B — 8 

even 


In particular, if B (4 {1,-1,16,-16}, we always have 2 | C. 

(c) Let p be an odd prime such that ord p (A 2 — 4/1) is an even positive integer. By (a), we assume p \AB. Tate’s 
algorithm tells us that in this case, E has reduction of type I ord and we have 2 | C p . □ 

Proposition 6.3. Let E be an elliptic cun’e defined by the equation (1141) . 

(a) Suppose that B = 1. If A = 0 or 1 (mod 4), then Ci = 1. If A = 3 (mod 4), then C 2 = 2. When A = 2 
(mod 4), the situation is more complicated, and we summarise the value C 2 modulo 2 according to A 
(mod 128) as follows. 


A 

mod 128 

2 

6 

10 

14 

18 

22 

26 

30 

34 

38 

42 

46 

50 

54 

58 

62 

c 2 

mod 2 

0 

0 

1 

0 

0 

0 

1 

1 

0 

0 

1 

0 

0 

0 

1 

1 

A 

mod 128 

66 

70 

74 

78 

82 

86 

90 

94 

98 

102 

106 

110 

114 

118 

122 

126 

c 2 

mod 2 

0 

0 

1 

0 

0 

0 

1 

1 

0 

0 

1 

0 

0 

0 

1 



If A = 126 (mod 128), then the parity of C 2 is the same as the parity of ord 2 (A + 2). Moreover, E 
has good reduction modulo 2 if and only if A = 62 (mod 128). In particular, Ci is odd if and only if 
A = 0 (mod 4); A = 1 (mod 4); A = 10 (mod 16); A = 62 (mod 128); or A = 126 (mod 128) and 

ord 2 (A + 2) is odd. 

(b) Suppose that B = — 1. Then C 2 is even if and only if A = 0 (mod 4). 

Proof. Tate’s algorithm. □ 

Remark. By Propositions 16.21 and 16.31 we assume the following throughout this section; E is an elliptic curve 
defined by the equation (IT4l) for relatively prime A G Z and B £ {1, —1,16, —16} with discriminant A = 2 4 B 2 (A 2 — 
4 B), such that all odd prime divisors of A 2 — 4/i has odd exponent. Moreover, 

• when B = 1, we assume A = 0 (mod 4), A = 1 (mod 4), A = 10 (mod 16), A = 62 (mod 128), or 

A = 126 (mod 128) and ord 2 (A +2) is odd; 

• when B = — 1, we assume A ^ 0 (mod 4); 

• when B = ±16, we assume A = 1 (mod 4). 

Remark. We furthermore assume A > 0, by removing finitely many exceptional cases by explicit computation. As 
A = 16B 2 (A 2 —4 B), we need to check the cases (A, B) = (0,1), (±1,1) and (±n, 16) for n = 0, 1, • ■ • ,7. This is 
easy with Sage Mathematics Software ED. 

6.2. {#U1(E/K)) l/2 . In this subsection, we shall see 2 | {#IM{E/K)) 1 ^ 1 , for various remaining cases left from 
considerations about Tamagawa numbers. Our main job is to show 'fit + dim<t> > 4 (notations from subsection 
O ). Then, 


^/^ + dim<J> > 4 

- > 

dimr 2 III(£/AT) [2] > 1 


2 | (#m (E/K )) 1/2 


The first implication follows from Kramer’s theorem (see subsection l2.1l >. and the last implication is due to Koly- 
vagin’s theorem El. 

Proposition 6.4. Suppose that B = — 1. By the considerations of the subsection above, we assume 

• A = 0 (mod 4), and 

• if I is an odd prime dividing A 2 — 4B = A 2 + 4, then it has odd exponent. 

Then we have fit + dimp, <!> > 4, i.e., 2 | (#ni(£’ /K)) 1 ^ 2 , except for 

• ‘128b2’ and ‘ 128d2’, for which 2 | M; 

• a family of curves for which A 2 + 4 is a power of a prime number. 
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Remark. The exceptional family will be dealt with in the next subsec tion !6. 31 
Proof. Our elliptic curve E is given by 

y 2 =x i +Ax 2 — x, (15) 

such that A = 1,2,3 (mod 4). In any cases, the minimal discriminant of the curve becomes A m ; n = A = 2 4 (A 2 +4). 
In particular, the prime 2 is always a bad one. Since 2 must split comletely in K, we must have d = 1 (mod 8). 
Since i q >l for each prime divisor q of d, we may assume that there are at most 2 prime divisors in d, as i x , = 1 
always. Glueing this with the fact that d = 1 (mod 8), we have either d = —q for an odd prime q such that q = -1 
(mod 8) or d = —qq', for distinct odd primes q and q' such that q = 1 (mod 4) and q' = 3 (mod 4) with either 
{q,q') = (1, — 1) (mod 8) or {q,q') = (5,— 5) (mod 8). 

If £ is an odd prime dividing A, i.e., £ | (A 2 + 4), then by the “sum of two squares” theorem, we must have £ = 1 
(mod 4), i.e., £ = 1 or 5 (mod 8). 

Now we compute the group Scl° (E/ Q). Note the following local images. Definitions for 5, are the same as in 


• ImcL = {1}. 

• Im<5 p = Z p Q* 2 /Q* 2 , for odd primes p\ A. 


vx2 

U P ~ / \lp 

Im5 p = Qp /Qp 2 for odd primes p \ A. 


• Imc>2 = 


p < ^p 

{1,5} if A = 1,3 (mod 4), 

{1,2,5,10} if A = 2 (mod 4). 


Suppose that d = —q with q = — 1 (mod 8) Since ( — ) = (—1)^~~ (—1) 


v -1 


P -1 £-1 / p 


— ), we have ( — ) = 1 for 


any odd prime p | (A- +4). If A = 1,3 (mod 4), then A" +4 is odd, and as every prime divisor of A 2 +4 has odd 


exponent, we can conclude that 


A 2 + 4 

q 


= 1 because the left hand side of the expression is the product of — 

q 


running over all primes p | (A 2 +4). Secondly, suppose that A = 2 (mod 4). This means that there is an integer 
k such that A = 2 + 4k, whence A 2 + 4 = 16 k 2 + \ 6 k + 8 = 2 3 (2£ 2 + 2k+ 1), so ord?(A 2 +4) = 3. In this case, 


A 2 + 4\ 

q ) 


n 

p odd primes, 
p|A 2 +4 


— 1=1, since q = —\ (mod 8). Therefore, we always have 

q 


A 2 + 4 

q 


= 1, i.e.. 


i q = 2, whence if = 3. 

Now consider the Selmer group Sel^(-E^/Q). The local images are given as follows. 

• Im<5£ = {l}. 

• Im5p = ZpQp 2 /Qp 2 , for odd primes p \ Aq. 

• Im5p = Qp /Qp 2 for odd primes p \ A. 

• Im5^ = {l}. 

'{1,5} ifA= 1,3 (mod 4), 

{1,2,5,10} if A = 2 (mod 4). 

IfA = 2 (mod 4) then ord 2 (A 2 +4) = 3. As 2 is a quadratic residue modulo q, and since A 2 +4 must have at least 
one odd prime except for the cases A = ±2, the image of 2 gives a nontrivial element in <t>. When A = ±2, the 
curve is equal to ‘128b2’ or ‘128d2\ In these cases M = 2. If A = 1 or 3 (mod 4) and if there are at least two 
prime divisors of A 2 + 4, then we can also find a nontrivial element in <1>. If A 2 + 4 is a power of a prime, then this 
will be dealt as exceptional cases. See IQ 

Suppose that d = —qq' with q = 1 (mod 4) and q' = 3 (mod 4). First note that we are reduced to the case 


Im §2 = 


that 


have 


A 2 + 4 

q 

A 2 +4 


A 2 +4 

V 


= — 1, since otherwise we have ip > 4. Moreover, if £ | A, for £ = q or q' then we 


= 1, a contradiction. Now we impose the Heegner hypothesis. At first, since the prime 2 

must split completely in K, so thus d = 1 (mod 8), and we have (q,q') = (1,-1) or = (5,-5) (mod 8). For odd 
primes p dividing A, we must have p = 1 (mod 4) by ‘sum of two squares theorem’, and thus we have to have 

etther = ft] = 1 or ^W^)=-l. 


q' 


q' 


Local images for the Selmer group Sel^Zs^/Q) are given as follows: 
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• Im5^ = {1}; 

• lm8p = Z*Qp 2 /Qp 2 , for odd primes p\Aq (including/? = q')\ 

• Im 8 p = Q p /Q* 2 , for odd primes p | A q\ 

• when A = 1,3 (mod 4), 

2 ^{1,2,5,10} whenA = 2 (mod 4). 

Similar as above, if A = 2 (mod 4), then the image of 2 in <f> is a non-trivial element, so that di m<t> > 1. Now 
assume A is odd. If A 2 +4 have at least two distinct odd prime divisor, then the image of either one of them gives a 
non-trivial element in <f>. If A 2 +4 is a power of a prime, then this will be dealt as exceptional cases. See 16.31 □ 

Proposition 6.5. Suppose that B = 1. By the considerations of the subsection above, we assume 

• A = 0 (mod 4), A = 1 (mod 4), A = 10 (mod 16), A = 62 (mod 128), or A = 126 (mod 128) (in the 
last case we also assume ordi(A + 2) is odd); and 

• if l is an odd prime dividing A 2 — AB = A 2 — 4, then it has odd exponent. 

Then we have f^ii + dimp 2 <!> > 4, i.e., 2 | (#111 (E/K )) 1,/ “, except for ‘17a3’, ‘32a3’, and ‘80a2’,for which 2 | M. 

Proof. The main difficulty to prove this proposition is due to a large number of cases for A. The key to overcome 
is to group the various cases into 3 categories: (i) E has good reduction modulo 2, i.e., A = 62 (mod 128), (ii) 
A = 126 (mod 128), and (iii) the remaining cases. After this, proofs are nothing special. □ 

Proposition 6.6. Suppose that B = 16. By the considerations of the subsection above, we assume 

• A = 1 (mod 4), and 

• if l is an odd prime dividing A 2 — 4B = A 2 — 64, then it has odd exponent. 

Then we have + dimp, <J> > 4, i.e., 2 | (#IH(.E /K ))*^ 2 , except for ‘17a4’,for which 2 | M. 

Proof. Proofs are similar as above. □ 

Proposition 6.7. Suppose that B = — 16. By the considerations of the subsection above, we assume 

• A = 1 (mod 4), and 

• if £ is an odd prime dividing A 2 — 4B = A 2 + 64, then it has odd exponent. 

Then we have + dimp, <f> > 4, i.e., 2 | (#ni(£’ / K ))*^ 2 , except for 

• A = 15, in this case the curve is ‘272b2’ having C 2 = 2; 

• the family characterised by the condition that A 2 + 64 is a prime, having M = 2 for any curve in this 
family. 

Proof. Proofs are similar. The exceptional family here is called Neumann-Setzer family, and M = 2 can be found 
in G§|. □ 

6.3. Exceptional case. In this case we deal with the cases where A 2 + 4 is a power of an odd prime. By Lemma 
5.4 of Cao-Chu-Shiu 0, then A 2 + 4 is a prime unless either A = 2orA = 11. For those two non-prime cases, 
the corresponding curves are ‘128d2’ and ‘80b4\ and both of them have Manin constant 2. Excluding these cases, 
we assume A 2 + 4 is a prime. 

This family is parametrised by the following Weierstrass equation: y 2 = x 3 + A.v 2 — x, where A is an integer not 
divisible by 4, and A 2 +4 = p is an odd prime. It has discriminant A = 16 (A 2 +4) = 16 p, which is the minimal 
discriminant. The conductor of the curve E is 4 p and E (Q)tors = Z/2Z. 

Let G = E (Q)tors — Z/2Z, and consider the curve E' := E/G. By Velu’s formula, we can find a Weierstrass 
equation for E'. This is given as follows: 

y 2 = x 3 + Ax 2 + 4x + 4A 

with discriminant A' = — 2 8 (A 2 +4) 2 = —2 8 /? 2 . As the 2-torsion polynomial for E' is given by 

4(x 2 + 4) (x+A), 

we must have a rational 2-torsion point P = (—A,0) € E'( Q), i.e., Z/2Z C £ , (Q) t0 rs- If E , (Q)tors 2 Z/2Z, the 
weak Gross-Zagier conjecture is proved in the above sections. So we assume E'( Q) = Z/2Z. Making a change 
of variables xi->x' = x+A, we get another Weierstrass equation 

y 2 = x 3 — 2Ax 2 + (A 2 + 4)x. 
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By Tate’s algorithm, we know that C p = 2. Thus the weak Gross-Zagier conjecture is true for E' unconditionally. 

Now we consider E'(K) tOTS for quadratic field K satisfying Heegner hypothesis. If ortL E'(K)t OIS > oixL E 1 (Q ) lan , 
then E'(K) must contain either Z/2Z © Z/2Z or Z/4Z. For the first case, the 2-torsion polynomial of E' must 
split into linear factors in K. As the polynomial is 4(x 2 +4)(x+A), this happens if and only if K = Q(’ ff - 1). But 
in this case uk = 2, and the weak conjecture is also true for E. 

Now suppose that E(K) toIS > Z/4Z. By Lemma 13 in (9|. we must have A 2 +4 = s 2 for some s€ Q. But since 
A 2 +4 = p is a prime, we cannot have this case. Therefore, we have the following corollary to Proposition 12. 8 1 

Corollary 6.8. The weak Gross-Zagier conjecture is true for E in this family and for any quadratic field K 
satisfying Heegner hypothesis. 


Part 2. E (Q) to rs has a point of order 3 

7. Preliminaries for Part 2 

7.1. Optimal curves. For a positive integer A, let X\ (A) and Xf N ) denote the usual modular curves defined over 
Q. Let f denote an isogeny class of elliptic curves defined over Q of conductor A. For i = 0,1, there is a unique 
curve E, £ and a parametrisation 7t, : A; (A) —> Ei such that for any E £ f and parametrisation n [: A, (A) —> E, 
there is an isogeny it), : Lj —> E such that 0,- o n, = n[. For i = 0,1, the curve If is called the Xj(N)-optimal curve. 

In J2l, the authors proved the following theorem, which was conjectured by Stein and Watkins l28l . 

Theorem 7.1 (El. Theorem 1.1). For i = 0,1, let E\ be the Xi(N)-optimal curve of an isogeny class f of elliptic 
curves defined over Q of conductor A. If there is an elliptic curve E £ f given by y 2 +axy +y = x 3 with discrim¬ 
inant A = a 3 — 27 = (a — 3) (a 2 + 3a + 9), where a is an integer such that no prime factors of a — 3 are congruent 
to 1 modulo 6 and a 2 + 3a + 9 is a power of a prime number, then Eo and E\ differ by a 3-isogeny, which means 
that there is an isogeny 7t : Eo -A E\ with 3 | deg(7r). 

For any E £ we let Ex be the Neron model over Z and to be a Neron differential on E. Let 0 : E —> E' be 
an isogeny. We say that 0 is etale if the extension Ex —► Iff to Neron models is etale. If 0 : E -A E' is an isogeny 
over Q, then we have 0* {(o') = nco for some non-zero integer n = n^, where to' is a Neron differential on E'. The 
isogeny 0 is etale if and only if = ±1. If 0 : E —> E is the multiplication by an integer m, then 0*(ffl') = mco. 
Thus if 0 is any isogeny of degree p for a prime number p, we must have = 1 or /£, = p. If 0' denotes the dual 
isogeny, then 0' o 0 = [p\ is the multiplication by p mapping. So precisely one of 0 and 0' is etale. 

In ED. Stevens proved that in every isogeny class f of elliptic curves defined over Q, there exists a unique 
curve E mm £ 7? such that for every E £ < f, there is an etale isogeny 0 : E mm —> E. The curve £ nlm is called the 
(etale) minimal curve in f. Stevens conjectured that /' mm = E\ and recently Vatsal proved the following theorem. 

Theorem 7.2 fl32l. Theorem 1.10). Suppose that the isogeny class f consists of semi-stable curves. The etale 
isogeny 0 : E m [ n —> E\ has degree a power of two. 

7.2. Cassels’ theorem. Let E be a number field with absolute Galois group G/. , E and E' be elliptic curves 
defined over F, and 0 : E —> E' be an isogeny defined over F with dual isogeny 0' : E' —> E. For various places 
v of F, let F v denote the completion of F with respect to the place v. The sizes of the 0-Selmer group and the 
0'-Selmer group are related by the following theorem of Cassels in 0. 

Theorem 7.3 (J6) or M , Theorem 1). Suppose 0 is an isogeny from E to E' over F. Let Cq and C'^ be Tamagawa 
numbers ofE and E' at a finite place q ofF, respectively. Then we have 

#Sel^(£/A) #£(F)[0]-n v / £W l®'l v -n q C' 

#Sel*'(£'/F) ~ #E'(Fm-n v J E{Fv) \co\ v -U q Cff ’ 

where v runs through the infinite places, and q runs through the finite places. 

8. £’(Q)tors — Z/2Z®Z/6Z 

In this section, we prove the Main Theorem for the cases when £(Q)tors is isomorphic to Z/2Z ® Z/6Z. 
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Lemma 8.1. Let E be an elliptic curve defined over Q given by y 2 + a\xy + a$y = x 3 + a 2 X 2 + a^x + ag with a,- £ Z, 
and P be a torsion point of E (Q) of a prime order l. Suppose that E has bad reduction at p, having Weierstrass 
equation of the form y 2 -\-7T\xy = x 3 +7F>x 2 over F p , where a[ = a,; (mod p). If the point P goes to (0,0) in the 
reduced cur\’e, then t divides C p . 

Proof. Let Eq( Qp) be the group of Q ; ,-rational points of E which become non-singular points in the reduced 
curve modulo p. Since P becomes singular, the class P + Eq(Q p ) £ E(Q p )/Eq(Q p ) is non-trivial. Since \t\P = O, 
the identity element in E (Q), the order of the element P+Eq(Q p ) is exactly I in E (Q p ) /Eq(Q p ). Thus I \ C p = 
[E(Q p ):E 0 (Qp)}. □ 

Theorem 8.2. Suppose that E( Q)tors is isomorphic to Z/2Z0Z/6Z. Then the order 12 = #E (Q) tors divides the 
Tamagawa number C ofE. 


Proof. From ED, Table 3, elliptic curves defined over Q having torsion subgroup Z/2Z0Z/6Z are parametrized 
as follows: 


y 2 + (u — v)xy — uv(v + u)y = x 3 — v(v + u)x 2 , 


(17) 


with u, v £ Z, gcd(«,v) = 1 and - = 


(T-3S)(T + 3S) 
25(55-T) 


for a pair of relatively prime integers S. T £ Z, with S > 0. 


In the expression of the numerator (T — 35) (T + 35) and the denominator 25(55 — T) of the right hand side are 

V' 

relatively prime outside 2. Originally Kubert used a parametrisation seemingly different from the current one, but 
with some routine computations, readers may see that they are in fact equivalent. The discriminant A of the above 
equation is given by 


A = v 6 (v + u) 2 u 2 (9v + u) 

= 2 6 5 6 (55 — r) 6 (5 — T) 6 (T - 3S) 2 (T + 35) 2 (95- T) 2 . 


Let P = (0,0) be a torsion point of E( Q) of order 6. One can easily check that A is minimal at every prime p \ v 
because p cannot divide C 4 = (u + 3 v)(u 3 + 9u 2 v + 3uv 2 + 3v 3 ). Similarly, A is minimal at every prime q\ (v + u) 
and r \ u possibly except for q — 2 and r = 3. 

Suppose either 5 or T is even. As gcd(5, T) = 1, then the other should be odd. In this case (T — 35) (T + 35) 
and 25(55— T) are relatively prime, and thus u = (T — 35) (T + 35) and v = 25(55— T ). Suppose now that 
S — T f ±1. In this case there are two distinct primes p | 25(55— T), (in fact, p | v) and q \ (S — T) (in fact, 
q | (v + u) and q is odd). Modulo these primes p and q, the curve E has split multiplicative reduction. By 11271 . 
Appendix C, Corollary 15.2.1, we have 6 | C p and 6 | C q . So 36 | C. 

Now assume S—T = ±1. In this case we can find two distinct primes p = 2 and q dividing v = 25(55 —T). 
Similar as above, modulo these primes p = 2 and q, the curve E has split multiplicative reduction. By ill, 
Appendix C, Corollary 15.2.1, we have 6 | C p and 6 | C q . So 36 | C. 

Now we assume that both 5 and T are odd. If 5 = 1, then with the condition A f 0, there is an odd prime 
p | (5 — T)(l — T) (in fact, p \ v(v + u)) and a prime r \ (T — 3)(T + 3) (in fact, r \ u and r 3, p). Since E has 
split multiplicative reduction modulo p, by ED Appendix C, Corollary 15.2.1, we have 6 | C p . Since E has bad 
reduction modulo r, where the reduced equation is given by the following form y 2 + dfxy = x 3 + dfx 2 modulo r, 
by applying Lemma [87T1 to the point [3]P = (wv, uv 2 ) of order 2, we have 2 | C r . So 12 | C. 

If 5 f 1, then there is an odd prime p \ 5 (in fact, p \ v) at which E has split multiplicative reduction. By 11271 . 
Appendix C, Corollary 15.2.1, we have 6 | C p . When (55— T)(S— T) has an odd prime factory (in fact, q\v(v + u) 
and q f p). then E has split multiplicative reduction modulo q. Similarly, we have 6 | C q . So 36 | C. 

Suppose that |55 — T\ = 2 A and 5 — T = 2 B . From the condition that 5 is odd and 5 / I, one can find that 
either A = 2 orfi = 2 (and not both). If A = 2, we have T = 55±4. Substituting this into (T — 35) (T + 35), we can 
find an odd prime r \ (5 + 2) (25 ± 1) (in fact, r \ u and rfp) at which E has bad reduction y 2 + afxy = x 3 + dfx 2 . 
Note that if (5 ± 2)(25 ± 1) is a power of 3, then we must have 5 = 1,2 or 5. As the cases 5 = 1 or 2 are dealt 
in the above paragraphs, we can choose r f 3 if 5 f 5. Moreover, if 5 = 5 and T = 55 — 4, then 0 M 3 A < 12, so 
A is also minimal at r = 3. By applying Lemma [8+1 for the point [3]P = (uv. uv 2 ) of order 2, we have 2 | Cf. So 
12 | C. If B = 2, we have T = 5 + 4. There is a prime r \ (5 + 2)(5± 1) (in fact, r \ u and r\3p) at which E has 
bad reduction with reduced equation y 2 + dfxy = x 3 + afx 2 . By applying Lemma [8+1 for the point [3]P = (uv. uv 2 ) 
of order 2, we have 2 | C r . So 12 | C. □ 
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9. E (Q)tors =* Z/3Z 

In this section, we prove the Main Theorem for the cases when E (Q)tors is isomorphic to Z/3Z. More precisely, 
we show the following theorem. 

Theorem 9.1. Suppose that E( Q)tors is isomorphic to Z/3Z. Then the order 3 = #E(Q) tors divides iq : ■ C ■ M ■ 

(#in (e/k)) 1/2 . 

9.1. Tamagawa numbers. Let E be an elliptic curve defined over Q with a rational torsion point of order 3. We 
can take a Weierstrass equation for E of the following form: 

y 2 +axy + by = x 3 , (18) 

with a, b G Z, h > 0, and such that there is no prime number q satisfying both q \ a and q 3 \ b. The discriminant of A 
of E is given by A = b 3 (a 3 — 21b), which is the minimal discriminant A m ; n for£. Let T = {P := (0,0), (0, —b),0} 
be the rational torsion subgroup of order 3. 

Suppose first that b ^ 1. Then there is a prime p \ b, and Lemma 18711 or Tate’s algorithm shows 3 | C p . So we 
assume b = 1 in the sequel. 


9.2. Manin constants. We introduce an useful theorem by T. Hadano. 

Theorem 9.2 ( lil2l . Theorem LI). The quotient curve E' := E/T has a rational point of order 3 if and only if b 
is a cube f 3 with t > 0. Moreover the curve E' is given by the equation 

y 2 + (a + 6t)xy + (a 2 + 3at + 9t 2 )ty = x 3 (19) 

with discriminant A 1 = t 3 (a 2 + 3at+ 9t 2 ) 3 (a — 3t) 3 . 

Let E' be the curve E/T. Since b = 1 = l 3 , Theorem 9.2 says that E' also has a rational point of order 3. Thus 
we have a ‘chain’ E E' E” of elliptic curves and isogenies of degree 3. Each isogeny in the above chain is 
etale because its kernel is isomorphic to Z/3Z (the group scheme) since each kernel of the isogenies E —> E' and 
E' —> E" consists of Q-rational points of order 3. 

It follows from El, Proof of Theorem 2, such a chain in the isogeny class of E must have length at most 4. 
However, we can readily check that if there is a chain of exact length 4, then it must be identical to the chain 
‘27a4’ —> ‘27a3’ —> ‘27al’ —> ‘27a2’, and in this case we can check that 3 | M. 

Denote by 7? the rational isogeny class of the curve E, and let E mm , Eq, and E\ be the etale minimal curve, the 
Xo(N) -optimal curve, and the X\ (N)-optimal curve in the isogeny class respectively (cf. see subsection [T7TJ- 
Ignoring the above case, we have E = Emin, the etale minimal curve in up to isogeny of degree prime to 3. 
Thus, by Vatsal’s theorem [7T2l we have E = E mm = E\. Since we have a canonical etale isogeny E\ —> Eq called 
the Shimura covering (cf. Remark 1.8 in 11321 ) having degree divisible by 3, if E Eq then we have 3 | M. So 
we assume here and thereafter that E = E mm = E\ = Eq. Thus, by (the contrapositive statement of) Theorem 17. II 
either there are at least two distinct primes dividing a 2 + 3a + 9 or there is a prime p such that p (a — 3) and p= 1 
(mod 3). 

9.3. (#HI(E /K)) U2 . Now Theorem |9. 1 1 is reduced to the following proposition. 

Proposition 9.3. Let E be an elliptic curve of conductor N defined by a minimal Weierstrass equation y 2 + axy + 
y = x 3 with flgZ. Let K be an imaginary quadratic field satisfying the Heegner hypothesis with disc(E) ^ —3, 
i.e., uk 3 such that E(K) has rank 1. Suppose that either (i) there are at least two distinct primes dividing 
a 2 + 3a + 9; or (ii) there is a prime p such that p\ (a — 3) and p= 1 (mod 3). Then 3 divides C■ (#IH(£/ K ))*^ 2 . 


Proof. Let 0 be an isogeny defined over Q of degree 3 from E to the quotient curve E' of E by the torsion 
subgroup T = { P.IP.O } and tj>' : E' E be its dual isogeny. Since #E(K)[(j)] = 3 and #E(K)[(j)'] = 1, we have 


#E(KM 

#E'(K)W] 


3. Since K is an imaginary quadratic field, by Theorem 1.2 in ED, we have 


t— r Ie'(K v ) I 0)1 1V 
v|oo Ie(K v ) l®lv 


Ie'(C) l®1 
Ie(C) I®I 


3~ 1 |0*(ft/)/®| = 1 or 3 _1 . 
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Assume that 3 \ C, whence 3 { ]~[q Cq • By Theorem l7.3l we have 


dimp 3 Sel^ ( E/K ) > ordq 



( 20 ) 


Suppose that there are at least two distinct primes dividing a 2 + 3a + 9. Then at least one of them, say p, is not 
3. By Hadano’s theorem |9.2| and Lemma I8T1 we have 3 | C' p = C(, = C'L and 3 | C' c/ =C^ = CE Thus from ( 12()b . 
we have dimp 3 Sel^ (E/K) > 4. 

Suppose that there is a prime p such p (a — 3) and p = 1 (mod 3). Then there is at least one prime q ^ p 
such that q \ (a 2 + 3a + 9). By Theorem 19.21 and Lemma l8Tl we have 3 | C' q = C' q = C^. Since E' has split 
multiplicative reduction at p and 3 | ord /7 (A') = — ord ;3 (/), where A' and / are the discriminant and the /-invariant 
of E' respectively, we have 3 | C' p = C' p = CE by [|27l , Appendix C, Corollary 15.2.1. Thus from (l20l >. we have that 
dim r3 Sel^ (E/K) > 4. 

From the following short exact sequence of G^-modules 0 —> E [0] —> E [3] A- E' [0'] —> 0, we have the following 
long exact sequence: // o (GA:,£ ,, [0 , ]) —> H l (Gk,E[(/)]) -4 H 1 (Gk,E[3]) Since E'(K)[<\>'] = 0, ; is 

injective and thus dimr , Seijis /K) > dinip, Sel 1 ' (E/K). Thus we conclude that for the two cases, 

dim F3 Sel 3 (E/K) >4. (21) 


From the condition that E(K) has rank 1, we have E(K)/3E(K) ~Z/3Z©Z/3Z. So the following descent ex¬ 
act sequence 0 —> E(K)/3E(K) —> Sel 3 ^/AT) —>• UI(£’ /K) [3] —> Oand equation (OH imply that dimp 3 III(£/^f)[3] > 
2, and therefore 3 | (#UI(E/K)[3]) l/2 . □ 
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